Improved CORS support (include acceptable origins in all applicable responses).